Privacy Policy

Who is responsible for this data

The data controller is the entity identified in our Legal Notice. That page carries placeholders for the operator's legal name, tax ID, and registered address until finalized — it is not published with real values yet.

What we collect

Account data (email, name) for anyone who signs up to manage a stay; organization and stay information submitted at listing time; payment records processed by Stripe (STAYCLASH does not store card numbers); B2B billing details (company/professional name, country, billing address, tax ID, billing email) collected at the time of each contribution, since our paid ranking is sold exclusively to businesses and professionals, not consumers — see Terms; and usage data — profile views, outbound link clicks, and which language you prefer — needed to run the leaderboard, analytics, and notifications described in these pages.

Sub-processors

We use a small number of specialized providers to run STAYCLASH. Each only processes the data needed for its function:

• Supabase — database, authentication, and file storage (account data, organization/stay data, payment ledger, uploaded images).
• Vercel — application hosting and request logs (technical/traffic data needed to serve the site).
• Stripe — payment processing (billing/payment details; STAYCLASH never sees or stores full card numbers).
• Resend — outbound transactional email (e.g. position-change notifications, password reset); we do not use it for marketing email.

We don't use any advertising or analytics tracking vendor — see Cookies.

What we don't do

We don't sell personal data. We don't attribute a booking to a click without real, verifiable attribution. We don't use third-party advertising trackers.

Consent records

When you accept the Terms, Paid Ranking Disclosure, or the B2B declaration at checkout, we record which version you accepted, the timestamp, your IP address, and your browser's user-agent string. This is kept solely as evidence of what was agreed to and when — for example if a payment is later disputed — and is not used for tracking, profiling, or analytics. It is stored alongside the payment ledger and is subject to the same retention described below.

Payment data

Payments are processed by Stripe. STAYCLASH stores the resulting transaction records (amount, status, timestamps) as an append-only ledger and never deletes payment history, including when a payment is later disputed or reversed — those events are recorded as corrections, not deletions.

Retention

Account and stay data is kept for as long as the account is active plus a reasonable period after closure for legal and accounting purposes. Payment ledger records are kept indefinitely as required for financial and fraud-prevention record-keeping.

Your rights

Depending on where you are, you may have rights to access, correct, or request deletion of your personal data, subject to our record-keeping obligations (in particular, the payment ledger). To exercise these rights, contact us at the legal/support email listed in our Legal Notice (a placeholder until the operator finalizes it).

Cookies

See our Cookies page for what we use and why.